$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B2897A041D1C11F19ECA08BE103D8C67.roa File: B2897A041D1C11F19ECA08BE103D8C67.roa (raw, json) Hash identifier: dDoq0NSsJBrU8GbMwoOGwGBt+swdNtQ2Co9Bt0cv7SU= Subject key identifier: 2B:E0:5A:F5:6D:FA:89:ED:62:97:B8:C9:65:00:EC:DD:21:8C:C2:A7 Certificate issuer: /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Certificate serial: 61 Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B2897A041D1C11F19ECA08BE103D8C67.roa Signing time: Wed 27 May 2026 08:41:25 +0000 ROA not before: Wed 27 May 2026 08:41:25 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.243.108.0/22 maxlen: 24 103.231.28.0/22 maxlen: 24 2405:fc40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B Validity Not Before: May 27 08:41:25 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a16ae34-75cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:71:93:d6:a2:c2:1d:d9:45:63:3b:2a:08: 42:68:4b:40:d5:49:a9:50:b7:75:cb:f0:f9:94:be: 5d:f8:2e:ae:af:7c:d9:d7:8a:07:f1:1d:69:6c:ba: c4:32:10:17:df:74:b2:6a:a8:6b:1a:fb:76:75:95: f3:61:e4:2c:2e:62:8f:2f:20:d8:d0:c4:87:8b:cf: 29:c3:e1:75:5b:77:64:6a:6f:70:71:7b:9e:c1:aa: 58:60:42:6e:d5:11:d5:e2:f0:97:48:99:c7:4e:5d: f2:f3:1d:8e:4f:31:fb:01:be:1b:be:06:24:8d:7b: 82:e3:fd:e1:62:c0:c5:c7:9d:f6:dd:eb:41:e0:c0: b1:cb:4d:74:f8:8e:c7:54:1a:8a:4d:cb:71:72:37: 42:3b:b8:58:5b:fe:b4:3e:7d:04:57:d1:50:06:69: c1:8e:fc:84:25:80:3d:f4:c1:0d:14:72:fd:34:43: 3a:39:f2:16:8e:1b:b3:0b:43:2e:7f:f3:d0:24:3e: 6f:f2:ab:27:8d:1c:6c:0c:74:26:fc:dd:db:49:0f: 6e:5d:64:d1:82:2e:ed:29:cf:fb:72:75:b0:9f:ad: c0:43:da:92:04:56:3c:af:07:b0:e2:54:d0:8f:87: f5:04:6f:f6:0a:d8:e4:8b:fb:4d:9d:c5:32:3c:07: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:5A:F5:6D:FA:89:ED:62:97:B8:C9:65:00:EC:DD:21:8C:C2:A7 X509v3 Authority Key Identifier: keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/B2897A041D1C11F19ECA08BE103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.243.108.0/22 103.231.28.0/22 IPv6: 2405:fc40::/32 Signature Algorithm: sha256WithRSAEncryption a2:88:1b:33:89:55:49:1c:02:0f:12:6f:0a:59:23:5b:97:ac: f3:d7:e2:68:25:b1:d6:28:21:36:af:dd:ec:8d:80:71:5c:91: a1:77:77:45:c0:18:7b:0f:ed:37:88:0f:ac:de:17:15:fe:ad: 16:4a:5b:f2:5f:7f:9d:b3:a8:d2:fa:e6:15:d6:84:13:f9:92: a3:db:36:e1:1a:f0:1a:51:42:12:27:a8:42:20:10:ef:88:fc: 8d:0b:e6:43:1e:0c:36:27:92:1e:e3:d1:eb:ef:53:49:8f:55: ec:17:ed:0f:fc:66:35:8e:1f:fd:e0:63:40:ab:24:55:dc:f2: 89:2e:8d:f4:b2:ef:ca:3e:03:5f:b5:a6:bb:b0:b9:70:4b:c7: a8:d3:41:bf:6c:08:78:e5:a5:42:cf:43:6c:53:79:d2:7e:8c: 9f:8f:9d:bf:a4:a9:42:b5:d2:af:d6:70:97:5e:4e:82:4b:1b: 5d:03:b5:2d:c3:44:84:d3:13:18:66:5e:6d:e6:ea:1c:c7:81: 00:52:ba:5c:3a:51:d4:e5:bf:18:a3:c7:7f:e7:5f:87:7c:26: b8:f1:1e:a6:b5:67:d8:26:42:90:23:57:02:ac:22:c0:6f:33: 14:6a:e8:af:16:94:4f:0a:64:84:49:65:3b:34:1c:6f:ce:a2: d2:d6:5d:00 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEU3QjExMC8GA1UEBRMoQkEzOTQyNzVDNEZGOEY4RUYyMzQ3NDlBMzZGMkExOTEz OTI3OTU1QjAeFw0yNjA1MjcwODQxMjVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMTZhZTM0LTc1Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZeXGT1qLCHdlFYzsqCEJoS0DVSalQt3XL8PmUvl34Lq6vfNnXigfxHWlsusQy EBffdLJqqGsa+3Z1lfNh5CwuYo8vINjQxIeLzynD4XVbd2Rqb3Bxe57BqlhgQm7V EdXi8JdImcdOXfLzHY5PMfsBvhu+BiSNe4Lj/eFiwMXHnfbd60HgwLHLTXT4jsdU GopNy3FyN0I7uFhb/rQ+fQRX0VAGacGO/IQlgD30wQ0Ucv00Qzo58haOG7MLQy5/ 89AkPm/yqyeNHGwMdCb83dtJD25dZNGCLu0pz/tydbCfrcBD2pIEVjyvB7DiVNCP h/UEb/YK2OSL+02dxTI8B9ldAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUK+Ba9W36 ie1il7jJZQDs3SGMwqcwHwYDVR0jBBgwFoAUujlCdcT/j47yNHSaNvKhkTknlVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RTdCLzUxMUIzQjFBRDk5 QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdWpsQ2RjVF9qNDd5TkhTYU52S2hrVGtubFZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU3Qi81MTFCM0IxQUQ5OUExMUYwOEQ0OTM4QjA2NUQzNjQxRC9CMjg5N0EwNDFE MUMxMUYxOUVDQTA4QkUxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAIr82wDBAJn5xwwDQQCAAIwBwMFACQF/EAwDQYJKoZIhvcNAQELBQAD ggEBAKKIGzOJVUkcAg8SbwpZI1uXrPPX4mglsdYoITav3eyNgHFckaF3d0XAGHsP 7TeID6zeFxX+rRZKW/Jff52zqNL65hXWhBP5kqPbNuEa8BpRQhInqEIgEO+I/I0L 5kMeDDYnkh7j0evvU0mPVewX7Q/8ZjWOH/3gY0CrJFXc8okujfSy78o+A1+1pruw uXBLx6jTQb9sCHjlpULPQ2xTedJ+jJ+Pnb+kqUK10q/WcJdeToJLG10DtS3DRITT ExhmXm3m6hzHgQBSulw6UdTlvxijx3/nX4d8JrjxHqa1Z9gmQpAjVwKsIsBvMxRq 6K8WlE8KZIRJZTs0HG/OotLWXQA= -----END CERTIFICATE-----Generated at Sat Jun 13 20:01:31 2026 by rpki-client